Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205374.roa
File: AS205374.roa (raw, json)
Hash identifier: TfpdiTg/+6TjFDcSGU3p24h/0C9bts/WZ9FzAxY4Zm0=
Subject key identifier: 18:CF:5B:55:81:12:81:65:C3:93:E8:03:14:5A:7F:10:3F:99:E5:22
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 68BEF50FBB4D03F03A9178B2E6B713390A452594
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205374.roa
Signing time: Fri 31 Jul 2026 02:08:58 +0000
ROA not before: Fri 31 Jul 2026 02:03:58 +0000
ROA not after: Fri 30 Jul 2027 02:08:58 +0000
asID: 205374
IP address blocks: 2a0f:85c1:cf5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:be:f5:0f:bb:4d:03:f0:3a:91:78:b2:e6:b7:13:39:0a:45:25:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 31 02:03:58 2026 GMT
Not After : Jul 30 02:08:58 2027 GMT
Subject: CN=18CF5B5581128165C393E803145A7F103F99E522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:09:47:a8:37:d2:ba:e5:97:c3:55:12:c7:72:
e0:3a:df:8f:7d:60:20:69:50:81:3d:27:c1:08:8e:
cb:cc:f9:61:d6:0e:1a:ae:d8:79:62:29:21:35:4b:
4b:af:45:d8:f6:e2:52:db:e3:9a:42:f3:fa:61:90:
76:92:97:9a:34:d0:f7:3d:63:51:4d:1e:51:81:7f:
3c:22:47:f3:4a:1c:79:aa:7b:72:d9:be:00:5b:04:
39:60:31:48:bd:1f:18:38:c4:2a:86:65:3d:70:68:
73:21:92:39:d9:02:71:b7:0d:66:d5:15:72:9a:02:
18:b0:12:e3:20:5d:3a:4e:38:86:63:01:6f:ac:1a:
fc:7a:d4:59:4d:23:d0:f5:72:fd:2e:f6:32:6e:30:
ea:50:af:5b:d7:46:a8:f6:d9:03:5b:ef:96:a4:74:
e7:9b:c7:0d:74:9e:71:5b:0d:e1:73:2c:39:e8:e8:
ed:3d:3b:9f:c6:a3:be:c6:1a:b1:8c:01:0d:d9:41:
54:05:f2:34:d7:ca:0b:e6:ab:1b:62:b6:05:bd:33:
a4:2a:4e:06:5a:4d:b0:64:1b:d4:5d:57:9b:a0:12:
ea:ed:06:f1:e2:2b:8f:36:03:73:61:2d:ba:5b:99:
ac:de:f2:86:fd:26:bf:52:a3:32:99:1a:12:48:6a:
cf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CF:5B:55:81:12:81:65:C3:93:E8:03:14:5A:7F:10:3F:99:E5:22
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205374.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cf5::/48
Signature Algorithm: sha256WithRSAEncryption
49:45:97:a6:99:c7:ff:4b:7c:77:ea:72:cf:4c:94:ba:41:dd:
30:b4:90:18:6d:06:cc:eb:7a:4a:72:0b:cf:95:84:fc:ed:43:
d9:79:d8:17:e3:a0:5b:16:f3:e1:65:5f:d1:74:cb:c5:bb:a6:
e2:6d:38:d4:d4:33:bd:62:b1:e7:fe:cd:13:c3:e6:a8:3c:c7:
26:3e:bf:db:c7:f5:21:40:42:d5:f8:77:c5:51:fa:1a:3e:b2:
07:99:06:73:74:a7:31:d5:15:67:9d:dc:0b:9b:7c:e1:e7:dc:
b5:84:1b:a7:84:96:9d:4c:19:eb:1e:b8:4c:28:32:09:23:ec:
8d:83:6d:1f:a7:9f:09:4b:68:b4:35:09:fe:c9:c4:b1:fe:a6:
8a:f7:f1:9a:6a:f4:86:df:e2:19:e9:56:ee:dc:b8:f8:a0:e4:
c4:d2:a1:c9:c6:f1:3d:68:ad:92:2e:48:e0:6e:bc:4b:69:63:
62:7c:16:65:2a:31:11:9f:4f:b6:89:b3:de:1f:59:2a:c6:24:
7c:89:f0:b7:d0:8d:2c:38:41:09:6a:e4:8e:f2:b8:f3:82:6b:
e8:54:c4:c9:d2:75:c2:ef:db:99:5c:d7:82:0f:19:64:07:ec:
2f:33:30:aa:36:34:05:4a:98:ff:9b:82:b8:9b:a6:7d:61:d8:
3c:9c:b0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:25:22 2026 by rpki-client